Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
File: zRQ2kCMKRApot6iqmCefL2Xf7ig.mft (raw, json)
Hash identifier: 7HfepGSrXFXHCHc56g0a/Vs9lG/F2R7CzvyWzVtnEXQ=
Subject key identifier: 3F:BD:C7:DA:03:19:C7:55:5B:AB:DD:A2:64:57:AB:D4:DA:24:1E:1F
Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Certificate issuer: /CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Certificate serial: 01A068382273B71D4A3C940ECB80F04D1B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
Manifest number: 1738
Signing time: Thu 03 Sep 2026 17:01:43 +0000
Manifest this update: Thu 03 Sep 2026 17:01:43 +0000
Manifest next update: Fri 04 Sep 2026 17:01:43 +0000
Files and hashes: 1: beStaP3U9BouVtR6HKL7Bht809g.roa (hash: 9C0Yz+gtWBKD86eXJ/yNK0jQEWAJqpkTW4DLxbpVN08=)
2: zRQ2kCMKRApot6iqmCefL2Xf7ig.crl (hash: dswzUtFcEdWrWRnlMckZ2NVPpC6+yztfmejOxDdTBX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:38:22:73:b7:1d:4a:3c:94:0e:cb:80:f0:4d:1b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Validity
Not Before: Sep 3 17:01:43 2026 GMT
Not After : Sep 4 17:01:43 2026 GMT
Subject: CN=3fbdc7da0319c7555babdda26457abd4da241e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:9e:19:8c:45:46:35:d2:45:4a:20:da:fc:
83:9a:08:16:82:18:77:bd:d2:7e:88:5e:a3:cb:bf:
b4:c3:77:06:2b:81:0e:27:22:16:b6:8d:28:89:a4:
53:79:7e:1e:c0:9e:7b:d4:38:98:d9:e5:46:70:36:
12:22:68:af:7f:9d:df:97:e1:c8:66:f3:34:db:f4:
96:2a:f8:c3:26:88:cb:1a:87:c7:63:bd:40:30:a5:
7c:3d:d8:12:56:e7:3f:c8:93:25:28:9b:e0:8c:b3:
37:28:37:6c:ed:92:38:a5:b4:22:81:e2:95:bd:6c:
df:7d:77:54:b7:fd:6a:d1:9c:24:3e:3f:51:a0:00:
4b:70:0d:88:f7:f2:48:e8:86:70:79:e1:7f:aa:db:
f5:36:95:34:47:9c:14:a4:9c:a7:48:26:96:07:2b:
c8:a8:db:21:10:c7:29:02:d9:7c:9a:b9:63:13:a2:
83:16:74:0a:0d:1b:9d:e6:9c:0e:54:29:d3:10:c9:
18:5f:80:60:f3:ad:ba:42:c5:46:9d:5c:47:15:ed:
f6:72:63:fc:82:02:98:63:a5:d9:a3:07:84:69:7d:
01:91:e0:3c:b1:4c:13:83:d5:09:76:47:1e:a9:2e:
16:f5:3e:5a:4d:52:2e:51:62:7d:3c:36:b4:87:ce:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BD:C7:DA:03:19:C7:55:5B:AB:DD:A2:64:57:AB:D4:DA:24:1E:1F
X509v3 Authority Key Identifier:
keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c8:f9:4b:41:0d:7c:d4:4e:0b:9b:19:df:62:5b:12:de:1d:
a8:b8:a4:e6:13:e6:43:dd:1f:ad:8a:32:72:ef:37:df:2e:60:
bd:35:7c:5b:27:f1:a5:97:bc:a7:9b:d0:54:26:50:a1:ec:44:
eb:4f:79:8f:31:d4:4d:2f:98:03:dc:83:91:5c:f5:51:4b:a7:
51:fd:08:29:55:3d:78:06:ca:0a:9a:40:3d:54:ab:f1:3a:b2:
46:a6:c8:59:7f:30:24:c0:fa:b5:4e:bf:c7:c2:98:6b:f7:96:
bc:fe:7f:d4:6f:43:05:89:fe:1b:fc:54:6a:b0:7a:f5:90:92:
f5:6f:d1:5f:b6:39:8e:05:56:9e:5e:43:01:48:d2:85:b5:93:
59:64:92:19:e6:25:1a:4f:0c:0f:10:90:0b:8d:42:52:25:b8:
00:98:09:ca:6e:2f:ea:5f:64:c7:1d:a0:d6:f7:fd:70:ac:c6:
30:71:b9:4f:4e:42:ef:51:ce:56:fb:76:8b:6b:0a:ab:8b:81:
32:0c:78:0c:ea:a9:d4:aa:af:96:f5:40:ac:64:f2:a5:b0:5c:
0e:79:a5:ce:cd:11:83:60:e3:2e:5a:1e:b6:5d:85:9b:5a:c0:
d2:22:f5:96:f7:bf:00:b6:0d:3e:5c:ca:4c:e5:5b:a8:bb:90:
d4:de:43:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:14:18 2026 by rpki-client